agentic-actions-audito…
Audit GitHub Actions that run AI agents for prompt injection, unsafe interpolation, sandbox gaps, and permissive actor rules. Use…
Use this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging Face API would help. This is especially useful when chaining or combining API calls or the task will be repeated/automated. This Skill creates a reusable script to fetch,
$ npx -y skills add waybarrios/opencode-power-pack --skill huggingface-tool-builder --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/huggingface-tool-builderContext preview
The summary Claude sees to decide when to auto-load this skill.
Use this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging Face API would help. This is especially useful when chaining or combining API calls or the task will be repeated/automated. This Skill creates a reusable script to fetch,
name: huggingface-tool-builder description: Use this skill when the user wants to build tool/scripts or achieve a task where using data from the Hugging Face API would help. This is especially useful when chaining or combining API calls or the task will be repeated/automated. This Skill creates a reusable script to fetch, enrich or process data. license: Apache-2.0 (modified; see UPSTREAMS.json)
Your purpose is now is to create reusable command line scripts and utilities for using the Hugging Face API, allowing chaining, piping and intermediate processing where helpful. You can access the API directly, as well as use the `hf` command line tool. Model and Dataset cards can be accessed from repositories directly.
Make sure to follow these rules:
Be sure to confirm User preferences where there are questions or clarifications needed.
Paths below are relative to this skill directory.
Reference examples:
Baseline examples (ultra-simple, minimal logic, raw JSON output with `HF_TOKEN` header):
Composable utility (stdin → NDJSON):
Composability through piping (shell-friendly JSON output):
The following are the main API endpoints available at `https://huggingface.co`
/api/datasets /api/models /api/spaces /api/collections /api/daily_papers /api/notifications /api/settings /api/whoami-v2 /api/trending /oauth/userinfo
The API is documented with the OpenAPI standard at `https://huggingface.co/.well-known/openapi.json`.
**IMPORTANT:** DO NOT ATTEMPT to read `https://huggingface.co/.well-known/openapi.json` directly as it is too large to process.
**IMPORTANT** Use `jq` to query and extract relevant parts. For example,
Command to Get All 160 Endpoints
curl -s "https://huggingface.co/.well-known/openapi.json" | jq '.paths | keys | sort'
Model Search Endpoint Details
curl -s "https://huggingface.co/.well-known/openapi.json" | jq '.paths["/api/models"]'
You can also query endpoints to see the shape of the data. When doing so constrain results to low numbers to make them easy to process, yet representative.
The `hf` command line tool gives you further access to Hugging Face repository content and infrastructure.
❯ hf --help Usage: hf [OPTIONS] COMMAND [ARGS]... Hugging Face Hub CLI Options: --help Show this message and exit. Commands: auth Manage authentication (login, logout, etc.). buckets Commands to interact with buckets. cache Manage local cache directory. collections Interact with collections on the Hub. datasets Interact with datasets on the Hub. discussions Manage discussions and pull requests on the Hub. download Download files from the Hub. endpoints Manage Hugging Face Inference Endpoints. env Print information about the environment. extensions Manage hf CLI extensions. jobs Run and manage Jobs on the Hub. models Interact with models on the Hub. papers Interact with papers on the Hub. repos Manage repos on the Hub. skills Manage skills for AI assistants. spaces Interact with spaces on the Hub. sync Sync files between local directory and a bucket. upload Upload a file or a folder to the Hub. upload-large-folder Upload a large folder to the Hub. version Print information about the hf version. webhooks Manage webhooks on the Hub.
The `hf` CLI command has replaced the now deprecated `huggingface-cli` command.
54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face ML/training, and more.
Audit GitHub Actions that run AI agents for prompt injection, unsafe interpolation, sandbox gaps, and permissive actor rules. Use…
Audit and improve project-rules files (AGENTS.md, CLAUDE.md, .agents/instructions, local overrides) so the agent keeps accurate…
Capture learnings from the current session into the project-rules file (AGENTS.md, CLAUDE.md, or local override) so future…
Operational rubric that turns "don't make AI slop" into observable properties, severity levels, evidence requirements, and repair…
Design a feature architecture by analyzing existing codebase patterns and conventions, then provide a comprehensive…
Deeply analyze an existing codebase feature by tracing execution paths, mapping architecture layers, understanding patterns and…